Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2004-0405HistoryJun 01, 2004 - 4:00 a.m.
CVE-2004-0405
2004-06-0104:00:00
Debian Security Bug Tracker
security-tracker.debian.org
12
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.011 Low
EPSS
Percentile
84.5%
CVS before 1.11 allows CVS clients to read arbitrary files via … (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | cvs | < 1:1.12.5-4 | cvs_1:1.12.5-4_all.deb |
| Debian | 11 | all | cvs | < 1:1.12.5-4 | cvs_1:1.12.5-4_all.deb |
| Debian | 999 | all | cvs | < 1:1.12.5-4 | cvs_1:1.12.5-4_all.deb |
| Debian | 13 | all | cvs | < 1:1.12.5-4 | cvs_1:1.12.5-4_all.deb |
Related
slackware
slackware
cvs security update
2004-04-18 16:40:41
openvas
openvas
Gentoo Security Advisory GLSA 200404-13 (cvs)
2008-09-24 00:00:00
FreeBSD Ports: cvs+ipv6
2008-09-04 00:00:00
FreeBSD Security Advisory (FreeBSD-SA-04:07.cvs.asc)
2008-09-04 00:00:00
cvelist
cvelist
CVE-2004-0405
2004-04-17 04:00:00
CVE-2004-0180
2004-04-16 04:00:00
nvd
nvd
CVE-2004-0180
2004-06-01 04:00:00
CVE-2004-0405
2004-06-01 04:00:00
cve
cve
CVE-2004-0405
2004-06-01 04:00:00
CVE-2004-0180
2004-06-01 04:00:00
osv
osv
cvs - several vulnerabilities
2004-04-16 00:00:00
freebsd
freebsd
CVS path validation errors
2004-04-14 00:00:00
debiancve
debiancve
CVE-2004-0180
2004-06-01 04:00:00
nessus
nessus
GLSA-200404-13 : CVS Server and Client Vulnerabilities
2004-08-30 00:00:00
FreeBSD : CVS path validation errors (32)
2004-07-06 00:00:00
RHEL 2.1 / 3 : cvs (RHSA-2004:153)
2004-07-06 00:00:00
redhat
redhat
(RHSA-2004:153) cvs security update
2004-04-14 00:00:00
debian
debian
[SECURITY] [DSA 486-1] New cvs packages fix multiple vulnerabilities
2004-04-17 01:37:15
freebsd_advisory
freebsd_advisory
FreeBSD-SA-04:07.cvs
2004-04-15 00:00:00
ubuntucve
ubuntucve
CVE-2004-0405
2004-06-01 00:00:00
CVE-2004-0180
2004-06-01 00:00:00
gentoo
gentoo
CVS Server and Client Vulnerabilities
2004-04-14 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package cvs version 1.11.14-alt2
2004-04-07 00:00:00
suse
suse
remote code execution in cvs
2004-04-14 15:54:44
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.011 Low
EPSS
Percentile
84.5%
Related for DEBIANCVE:CVE-2004-0405